Legal
Privacy policy
How Encore Luxe collects, uses and protects personal information when you browse the shop, place an order, or submit a private valuation.
Last updated 28 September 2026
This privacy policy explains how Encore Luxe Ltd (“we”, “us”, “our”), collects and uses personal information when you browse shop.encoreluxe.co.uk, place an order, contact us, or request a private valuation.
We are the data controller, company no. 17518247. Our registered office is Old Sorting Office, Oldfield Lane, Heckmondwike, West Yorkshire, WF16 0JD. Public contact: hello@encoreluxe.co.uk · 01924 943540. Data protection officer / group privacy contact: Ashley Hainsworth.
What we collect
Depending on how you use the shop, we may process:
- Identity and contact details — name, email address, telephone number, and delivery or billing address.
- Order and payment information — the pieces you buy or reserve, amounts payable in pounds sterling, bank-transfer references, and, when you pay by card, the limited payment data returned by our payment partners (we do not store full card numbers).
- Account details — if you create a signed-in account, your login email and preferences, including any store credit balance linked to a sale to us.
- Valuation and intake material — photographs you upload, descriptions of a piece, provenance notes, and messages you send for a private offer. Serial numbers and identifying marks are handled carefully and are masked before any listing is published. Indicative AI valuations on the marketing site are reviewed by a human before any purchase offer is confirmed.
- Technical data — IP address, browser type, device information, pages viewed, and cookie identifiers needed to run the shop securely. See our cookie policy.
- Correspondence — emails, contact-form messages, and notes of telephone calls about an order, return, or valuation.
Why we use your information
We use personal information to:
- show the catalogue, remember your bag, and complete checkout;
- take payment, arrange insured UK dispatch or collection, and send order updates;
- authenticate pieces we buy or sell, prepare private valuations, and honour authenticity guarantees;
- answer enquiries and administer returns under UK distance-selling rules;
- keep records required for tax, accounting, and consumer law;
- protect the shop against fraud, abuse, and technical faults; and
- improve the site where you have accepted analytics cookies.
Legal bases
Under UK GDPR we rely on:
- Contract — to take and fulfil your order, arrange delivery or collection, process a return, or complete a purchase of a piece you sell to us.
- Legitimate interests — to run a secure boutique shop, prevent fraud, keep limited business records, and reply to general enquiries, balanced against your rights.
- Legal obligation — where we must retain invoices, VAT records, or respond to a lawful request.
- Consent — for non-essential cookies under PECR and any optional marketing you expressly agree to. You may withdraw consent at any time.
How long we keep it
We keep order, payment, and invoice records for as long as UK tax and company law require — typically up to six years after the end of the relevant accounting period. Valuation photographs and offer correspondence that do not become a purchase are usually deleted or anonymised within twelve months, unless a longer period is needed for a dispute or authenticity enquiry. Cookie lifetimes are set out in the cookie policy.
Who we share information with
We do not sell your personal information. We share it only where needed to operate the shop:
- payment processors and banks (Worldpay for card payments), when card or bank-transfer settlement is used;
- insured couriers and logistics partners for UK dispatch or returns;
- hosting (Hypernode), email, and security providers who process data on our instructions under contract; Netlify hosts encoreluxe.co.uk;
- Google analytics/ads tools on the marketing site only after Accept;
- professional advisers (for example accountants or solicitors) bound by confidentiality; and
- authorities where the law requires disclosure.
Some providers may process data outside the UK. Where that happens we use appropriate safeguards such as the UK International Data Transfer Agreement or adequacy decisions.
Cookies
Essential cookies keep the shop working (session, bag, and security). Analytics or marketing cookies run only if you accept them via the cookie bar. Cookie choices on this shop and on encoreluxe.co.uk are separate. Full detail is in our cookie policy.
Your rights
You may ask us to access, rectify, or erase your personal information; restrict or object to certain processing; and receive a portable copy of information you provided. Where we rely on consent, you may withdraw it. To exercise these rights, email hello@encoreluxe.co.uk or ask for the DPO, Ashley Hainsworth. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk. An ICO fee registration number was not found on the Bed Kingdom privacy notice; Ashley can publish one here if Encore Luxe Ltd holds it.
Children
The shop is intended for adults. We do not knowingly collect personal information from children under 16.
Changes
We may update this policy when the shop, the law, or our processes change. The date at the top of this page will be revised when we do.
UK GDPR summary
A plain-English UK GDPR / Data Protection Act 2018 summary for this shop is available at GDPR & your data.
Contact
Encore Luxe Ltd
Old Sorting Office, Oldfield Lane, Heckmondwike, West Yorkshire, WF16 0JD
hello@encoreluxe.co.uk · 01924 943540
DPO / privacy: Ashley Hainsworth